Security Product Manager, Perimeter Defense

State Street•Boston, MA

4d•$120,000 - $202,500•Hybrid

About The Position

The Security Product Manager, Perimeter Defense reports directly to the Head of Defensive Engineering and defines and drives the strategy, roadmap, governance, and security outcomes for Perimeter Defense. Working across Security, GTS, application teams, and infrastructure teams, the role helps ensure the organization's perimeter is continuously understood, assessed, protected, and improved. It brings together security capabilities and stakeholders to deliver measurable outcomes and reduce perimeter risk. The role is part of Global Cyber Security, Defensive Engineering. It supports the firm's protection of its clients and critical business services by improving visibility into internet-facing assets and establishing consistent perimeter security practices. Relevant capabilities include attack surface management, vulnerability management, web application protection, responsible disclosure, bug bounty programs, and security testing. The position is performed under a hybrid work model in accordance with company policy, with flexibility to support global teams across time zones as needed. The listed annual salary range is $120,000–$202,500 for the primary location; the range may differ for work outside that location.

Requirements

Bachelor's degree in Information Security, Computer Science, Engineering, Information Technology, or a related field, or equivalent experience.
Experience in cybersecurity, technology, risk management, product management, or related disciplines.
Understanding of cybersecurity concepts such as vulnerability management, perimeter security, application security, cloud security, or attack surface management.
Experience coordinating initiatives across multiple teams and stakeholders.
Strong communication, collaboration, and stakeholder management skills.
Ability to translate security risks and requirements into practical business and technology outcomes.
Strong analytical, problem-solving, and decision-making skills.
Familiarity with security technologies and controls such as vulnerability management, firewalls, web application security, cloud security, or related areas.
Ability to work effectively across global teams and multiple stakeholder groups.
Strong written and verbal communication skills.
Interest in security, product management, and driving measurable business outcomes.
Flexibility to support global teams across multiple time zones as needed.

Nice To Haves

Relevant cybersecurity or product management certifications.

Responsibilities

Define and maintain the strategy, roadmap, and security outcomes for the Perimeter Defense product.
Establish visibility into perimeter-facing applications, infrastructure, domains, APIs, cloud services, and other externally accessible technologies.
Identify security coverage gaps and partner with appropriate teams to drive improvements.
Partner with GTS product owners and engineering teams to ensure security requirements and priorities are reflected in platform roadmaps.
Drive continuous assurance through attack surface management, vulnerability management, security testing, and related security capabilities.
Define onboarding requirements and security standards for new perimeter-facing services and technologies.
Establish metrics, reporting, and governance processes to measure effectiveness and communicate risk and progress to leadership.
Support audit, regulatory, risk, and control assurance activities related to perimeter security.

Benefits

401(k) retirement savings plan with company match
Basic life insurance
Medical insurance
Dental insurance
Vision insurance
Long-term disability insurance
Other optional insurance coverages
Paid time off, including vacation and sick leave
Short-term disability
Family care support
Employee Assistance Program
Eligibility for annual performance-based incentive awards, subject to stated exclusions
Eligibility for certain tax-advantaged savings plans
Inclusive development opportunities
Flexible work-life support
Paid volunteer days
Employee networks